Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/25b78a05-97b3-301c-a28c-49603b107639.roa
File:                     25b78a05-97b3-301c-a28c-49603b107639.roa (raw, json)
Hash identifier:          qQ04WAZ30Y5R17GL/EIhb5l9nD7vuaY1ZgKV4SVjTRs=
Subject key identifier:   AD:22:60:DD:6D:BF:A2:0D:F6:4F:93:0F:E5:73:E0:F0:29:EE:21:60
Certificate issuer:       /CN=048641d6-b337-4557-8bae-329ba9998239
Certificate serial:       010D0C9F432858499AF47E9A2582C980F9DF7000
Authority key identifier: A3:5C:CA:7A:27:0B:CA:50:C8:49:59:00:B1:4F:89:72:63:25:CC:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/25b78a05-97b3-301c-a28c-49603b107639.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     27353
IP address blocks:        192.132.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/048641d6-b337-4557-8bae-329ba9998239.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/048641d6-b337-4557-8bae-329ba9998239.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:7e:9a:25:82:c9:80:f9:df:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048641d6-b337-4557-8bae-329ba9998239
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=877b5cd2-dcc8-43d8-8415-94132456bbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:89:78:b5:02:71:9b:e8:ee:ab:69:23:b4:
                    6b:b4:fb:a0:e5:1a:7a:ad:70:cf:f7:99:85:b8:c9:
                    46:ee:52:19:51:49:26:cc:49:33:c6:89:84:41:b2:
                    89:04:9f:03:b2:63:4e:2a:29:eb:e7:72:16:8a:3c:
                    4d:0b:f1:f5:bc:d9:e6:05:ae:90:fe:20:29:86:57:
                    42:a6:48:bb:aa:d9:dd:52:1d:e8:c9:11:7b:1c:49:
                    e6:30:b3:2b:96:f4:1d:5a:d0:a2:20:78:f7:40:2c:
                    a4:15:ba:ad:4d:53:ec:ac:53:91:f8:cb:c7:b0:60:
                    ee:f6:5f:76:f3:b7:ca:3b:2b:d4:1e:2e:a1:fa:04:
                    17:bc:97:90:54:31:06:35:40:3e:b1:78:a2:70:a7:
                    50:3e:28:da:57:cc:3b:96:6c:11:32:af:f4:7b:7a:
                    35:d8:0e:74:65:c1:c9:97:14:18:f6:d3:d5:e9:8b:
                    ba:da:7f:ca:40:1b:2d:62:38:91:72:55:de:ac:aa:
                    e9:7c:54:f7:0d:b6:ea:1f:cd:0f:15:44:9a:9d:4e:
                    a9:6f:b8:62:37:ac:75:ed:f9:f8:83:dd:fb:18:e1:
                    c0:c8:ff:90:27:61:b5:a1:55:59:27:2a:a8:c5:4b:
                    73:28:f3:cb:6f:4b:21:dc:5e:73:ca:53:ce:88:33:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:22:60:DD:6D:BF:A2:0D:F6:4F:93:0F:E5:73:E0:F0:29:EE:21:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/25b78a05-97b3-301c-a28c-49603b107639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/048641d6-b337-4557-8bae-329ba9998239.crl

            X509v3 Authority Key Identifier:
                keyid:A3:5C:CA:7A:27:0B:CA:50:C8:49:59:00:B1:4F:89:72:63:25:CC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.132.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:49:33:5c:93:42:d5:b2:24:88:43:f8:f8:ac:23:85:78:58:
         0a:0f:07:35:b9:d8:6b:79:67:57:d6:9a:b8:63:c6:9d:59:71:
         e7:b5:30:8a:66:a0:1d:e0:f4:35:07:a6:bb:ec:a5:56:c6:4a:
         a9:5b:e4:1e:72:cb:21:0a:da:8a:c8:fa:91:f6:5a:4d:07:6d:
         6e:c9:24:5c:56:88:0f:d6:fb:91:c1:f8:41:fe:ca:0a:b9:29:
         2b:7c:07:31:0d:eb:1c:a6:44:d6:dd:f9:be:24:bf:c9:af:c5:
         b1:c6:22:06:75:4a:56:17:32:77:01:98:bd:7a:23:6a:f9:60:
         ed:97:e3:1c:34:c4:55:20:5b:f6:41:ee:74:6c:19:07:b3:4e:
         60:3f:76:ac:a4:8a:69:a7:16:cc:80:5e:c3:79:0b:a9:89:15:
         b3:56:63:53:61:e0:37:60:f3:4b:db:db:34:af:0c:35:37:07:
         ad:7c:12:c9:21:99:e0:b1:e6:db:c3:5a:b9:a1:f5:64:aa:d4:
         62:eb:9c:9e:3d:eb:35:43:fe:8d:a4:92:ce:55:04:89:1d:e6:
         b9:91:30:9b:fb:22:a9:d4:af:4b:58:35:15:98:2d:6c:1d:d0:
         c4:af:25:15:2a:a2:62:7b:30:81:cc:33:02:d6:3c:61:a7:99:
         0c:a6:a3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:40:38 2025 by rpki-client